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Foreword 



This Technical Specification (TS) has been produced by ETSI Special Committee Emergency Communications 
(EMTEL). 

The present document is the first of a set of deliverables covering the communication needs of citizens and authorities 
in emergency situations, as identified below: 

SR 002 180: "Requirements for communication of citizens with authorities/organizations in case of distress 

(emergency call handling)"; 

TS 102 181: "Requirements for communication between authorities/organizations during emergencies"; 

TS 102 182: "Requirements for communications from authorities/organizations to the citizens during 

emergencies"; 

TS 102 410: "Requirements for communications between affected citizens during emergencies". 



Introduction 

The present document outlines the requirements for Communications between Emergency Authorities, and the need for 
standardization in this area to support these requirements. Clause 4 describes the relations between authorities in general 
terms defining each authority. Clause 5 categorizes the Emergency Services Communications Requirements. Clause 6 
discusses the Scalability and Priority issues, including the dynamic need to employ resources. Clause 7 outlines the 
requirements applicable to the Network(s) and user services, describing the services and the network features and 
capabilities. Clause 8 raises a number of security considerations. The annexes describe some more operational 
considerations, which may be useful, background but do not constitute part of the communication requirements. 
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Scope 



The present document addresses the requirements for communications between the Authorized Representatives who can 
be involved in the responses and actions when handling an emergency. 

Clearly, the type and number of these Authorized Representatives in a given situation will directly depend upon the 
nature of the emergency. In the most frequent cases, only people on duty will have to intervene according to a day-to- 
day routine, but in some cases crisis teams or temporary headquarters will be called and, according to a plan, will 
organize a mass action gathering, if needed, the resources of several centres, or even including in the rescue plan 
additional levels of administrative authority, private operators and associations. These new Authorized Representatives 
will follow instructions or orders from the administrative crisis authority; for example utilities companies (water supply, 
transport; energy, etc.) may have to stop the provision of service or install priority of service schemes or execute a 
coordinated schedule for the restoration of the infrastructure and the service, as applicable. 

It is recognized that the public authorities keep the responsibility of overall management of actions during the duration 
of the crisis, establishment of pre-planned scenarios and, in specific locations, e.g. tunnels, underground transports, 
plants with high level of risk, organization of field exercises involving all these Authorized Representatives. 

The present document describes the functional requirements for communications between the Authorized 
Representatives involved in the responses and actions when handling an emergency. The level of precision has been 
chosen to avoid interaction with the specific local, regional or national organizations and diagrams of relations between 
Authorized Representatives. It follows from this that adaptations will have to be done when implementing the present 
document at a local level. 
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Definitions and abbreviations 



3.1 Definitions 

For the purposes of the present document, the following terms and definitions apply: 

Authorized representative: individual officer or institution authorized by public service (fire, police or health) to play 
a key role in handling of an emergency case 

access network: portion of the Telecommunications Network that provides access to the switching function, and 
terminates the User Access signalling, in a PLMN this is a radio access via a Base Station 

NOTE: c.f. ITU-T Recommendation Q.931, EN 300 403, TS 124 008. 

emergency control centre: facilities used by emergency organizations to accept and handle emergency calls 

NOTE: A PSAP forwards emergency calls to the emergency control centres. 

emergency number: special short code(s) or number(s) which is used to contact the PSAP to provide emergency 
services 

NOTE: The emergency number, is used by the emergency caller to request assistance from the Emergency 
services. There exist two different types of Emergency numbers in Europe: 

1) European emergency number, 112: unique emergency number for pan-European and GSM 
Emergency services and used, for example, in EU member-states, Switzerland and other European 
countries. 

2) National Emergency numbers: each country may also have a specific set of emergency numbers. 

emergency response organization: e.g. the police, fire service and emergency medical services 

emergency service: service, recognized as such by the Member State, that provides immediate and rapid assistance in 
situations where there is a direct risk to life or limb, individual or public health or safety, to private or public property, 
or the environment but not necessarily limited to these situations (see Commission Recommendation C(2003)2657 [1]) 

Fleetmap: parameter information programmed into the system infrastructure and into the subscriber radios to control 
how the radios will behave on the system 

location information: data processed in a public mobile network indicating the geographic position of a user's mobile 
terminal, and data in a public fixed network indicating the physical address of the termination point (see Commission 
Recommendation C(2003)2657 [1]) 

originating network: access network from which the emergency call was originated 

Public Safety Answering Point (PSAP): physical location where emergency calls are received under the responsibility 
of a public authority (see Commission Recommendation C(2003)2657) [1]) 

3.2 Abbreviations 

For the purposes of the present document, the following abbreviations apply: 

C&C Command and Control 

CBRN Chemical, Biological, Radiological or Nuclear 

EC European Commission 

ECC Emergency Control Centre 

GSM Global System for Mobile telecommunications 

ICT Information and Communication Technologies 

ITSEC Information Technology Security Evaluation Criteria 

LCS Location Services 

NCSA National Certification Security Agency 

PLMN Public Land Mobile Network 
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PSAP Public Safety Answering Point 

PTT Push To Talk 

QoS Quality of Service 

RSPCA Royal Society for the Prevention of Cruelty to Animals 

TCP/IP Transmission Control Protocol/Internet Protocol 

VPN Virtual Private Network 



4 Description of the type of relations between 

authorities 

National bodies should enter into formal agreements to ensure interoperability between services at all levels of incident 
management. An example is shown in annex D. 
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EMTEL Authority to authority 4-1 

Figure 1 : Reference points between authorities 

The description of the type of relations relies on the model illustrated in figure 1 . 
NOTE: The MiUtary Agencies are not shown in this diagram. 

4.1 Between PSAP and Emergency Control Centres 

PSAP and emergency control centres are two different functionalities that may or may not be integrated. 

The PSAP will, after reception of an emergency call, without delay communicate with the competent emergency control 
centre and transmit the location and nature of the emergency of the calling party along with any other relevant 
information that may be available associated with the call. 
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For this purpose, reliable and pre-planned communications links will be used with all the Emergency Control centres in 
the competence zone of the Emergency situation must enable to transmit voice and transfer all the data received at the 
PSAP (especially location data) or collected by the operator of the PS AP. 

4.2 Between PSAPs 

PSAPs normally work independently and their interrelation is not subject to special needs. 

In cases where calls arrive at another PSAP than the one responsible for the area where the call is originated (e.g. 
mobile phones in the bordering area between different PSAPs), there may be a need to transfer the call together with 
additional information (e.g. location data). 

The need will depend upon operation rules which have been established for these types of situation: 

• the call is handled by the receiving PSAP (e.g. the immediate help is a key point in the case, the case of PSAP 
backup, or load sharing); 

• the call is immediately transferred to the normal PSAP, which handles all the case; in such a scenario the 
location data must remain accessible to the normal PSAP, as for any received call; 

• depending on local procedures, the receiving PSAP may transfer the call directly to the relevant emergency 
centre, possibly together with information to the correct PSAP that the call has been transferred. 

It is the responsibility of the PSAPS or their organization to pre-define these rules of procedures. 

4.3 Between Emergency Control Centres 

ECC centres need to have the facilities to collaborate with other ECCS, either within the same cadre or across services 
(e.g. fire and health). 

Examples of cases where this is needed: 

• Callers are transferred to the wrong ECC: 

The call needs to be transferred to the correct ECC together with additional information (e.g. location 
data). 

• Cases involving more than one ECC (e.g. fires with risks for human lives; typically involve fire, health and 
police, CBRN incidents (or suspected incidents), terrorism). 

• The communications facilities exist to integrate the resources from two or more Emergency Control Centres, 
in case of a larger Emergency situation. 

Communication requirements between ECCs must: 

Establish communication links to support a number of services, including speech and data. 

Conform to the relevant procedures established by the ECCs or their organizations. 



• 



• 



• Support conference calls including external resources may need to be set up and kept over a substantial 
amount of time. In contingencies, calls to external resources may be required. 

4.4 Between Emergency Control Centres and Mobile 
Teams/Agents 

Access to permanent bidirectional links between Emergency Control Centres and their mobile teams is crucial in the 
handling of emergencies and need to be available for the duration of the Emergency/Disaster. Alerting and deploying 
the appropriate teams as required. 
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The main needs of the mobile teams, representing the Emergency Services can be briefly categorized as follows: 



• 



Specialized functionality in group communications and dispatching, with instant connection and including 
appropriate security, dynamic management of talkgroups, emergency calls, prioritization of communications, 
etc. 

• Call establishment times, typical requirements for voice call set-up time are in the range 0,3 to 1 s, with 0,5 s 
often cited as the requirement for wide area operation. 

• Seamless radio coverage throughout the whole served area, including guaranteed availability of coverage also 
under exceptional conditions - including means to maintain communication during network outage. 

• Incident capacity; the need for radio capacity is increasing during major incidents and accidents. Efforts have 
to be made to ensure as far as possible that sufficient communication facilities are available. 

• Networks shall provide a voice quality sufficient not too impair the understanding of the message. 

• Access to the network shall be controlled by using functionalities such as assigning priority to potential users, 
thereby restricting some parties from access to the network under certain circumstances. 

These communication links will mainly aim at the following: 

• managing the teams and operational coordination; 



• 



communicating between involved parties (mobile team members, control centre staff, receiving and assisting 
units/institutions) ; 

• reassessing on a continuous basis the overall situation and the priority of the missions; 

• enabling the reporting from the teams; 

• enabling the teams to call for additional support and resources. 

The above requirements are a fundamental factor for the efficiency, the safety and survival of the rescue agents 
themselves. In practice, the satisfaction of the above requirements needs the correct coordination of decisions taken by 
different responsible teams at different times. 

Therefore, these actions remain the responsibility of a variety of public authorities, but it should be made mandatory 
that the future technical systems provide solutions for all the above requirements. Technology provides tools to improve 
the effectiveness and efficiency when handling the tasks and procedures. It can never replace the responsibility of the 
Authorities and the correct application of their agreed procedures in the event of an incident. 

Because of radio coverage, instant access (network capacity), reliability and specialized communications facilities such 
as all informed net (group call) and fast call set-up, the basic technology solution used is a private radio and fixed 
communications system, normally shared by several independent authorities. This may be supplemented by facilities 
provided by the public networks and their resources. Risk assessments, together with moves towards cross-services and 
international collaboration, have led to an emphasis on interoperability between various services. For this collaboration 
to be efficient, the communication systems in use have to be interoperable. 

Interoperability means that the radio devices fit into all participating networks and that all necessary functions can be 
made available to users in a different network (similar to roaming). Networks connected to each other function like an 
overall network comprising various parts. In practice it means that a police officer, for example, can continue working 
on his radio terminal in a neighbouring country without interruption. He can communicate with his control room and his 
colleagues, and with the control room and his colleagues in the neighbouring country. 

Interoperability should not be mixed up with Interworking, which means connecting two or more networks of 
different technologies to system-specific terminals. The user can only use his terminal within the radio coverage of his 
network, but can communicate with users of other networks via the network connection. 
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4.5 Between Mobile Teams/Agents 



For mobile teams to work efficiently in handling an emergency, they need facilities for communication with other 
mobile teams involved in the same emergency. The need is for communication across the services involved, as well as 
within each service. These links will mainly aim at the following: 

management of the teams and operational coordination; 

communication between team members; 

reassessing on a continuous basis the overall situation and the priority of the missions; 

enabling the reporting within the teams; 

enabling the teams to call for additional support, other resources; 

exchanging information for guidance of the staff on the spot, assessment of the injuries and preparation of 
fixed rescue facilities before arrival of injured people. 

Interoperability between the communication systems in use is a pre-requisite for the efficient handling of the 
emergency. 

Fallback communication service needs to be available to the field teams in cases where network service is either 
unavailable or disturbed due to the nature of the Emergency/Disaster. 

4.6 Between Special Task Force or Temporary Headquarters 
and Permanent Entities in special conditions 

For their efficient work in handling emergencies Special Task Force or Temporary Headquarters and Emergency 
Control Centres are depending on access to permanent bidirectional links with the mobile teams and Temporary 
headquarters. This access needs to be available for the duration of the Emergency/Disaster. 

The basic need is for configurable communications, to fulfil all contingencies plans for, under the possible stages of 
escalation for a simple emergency situation, through a crisis to a regional or national disaster. 

4.7 Between IVIilitary Authorities and Civil Authorities 

Military forces are routinely used to support emergency services and such involvement may take place in three types of 
scenario: 

a) during major national emergencies where military authorities provide manpower and equipment to supplement 
public safety resources. These incidents are frequently in response to natural forces e.g. flooding, earthquakes; 

b) for pre-planned support to public safety organizations for planned major event e.g. Olympic games; 

c) in response to man made emergencies e.g. terrorist incidents where specialist military skills or equipment are 
necessary and may form an integral part of the emergency response. 



5 Emergency services Communication Requirements 

While the nature of an emergency may vary greatly, the communications services which may be required by authorities 
is more definable, although there may still exist disparity in geographical area, scale and number of authorities involved 
in any particular emergency. This clause is intended to describe mandatory communications services, together with 
other services which may be necessary or beneficial to users in some scenarios. 
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5.1 Methodology to determine the requirements from these 
relationships 

The great variety of emergency situations and events combined with the possible ways of their organizational and 
technical handling results in an extraordinary large number of different scenarios for which baseline requirements are 
laid down in the present document. However, the associated criticality and probability of occurrence of these scenarios 
may be very different. Therefore it is strongly recommended to carry out a risk analysis in each scenario and define the 
priority of handling for these scenarios. The procedures and actions required to be taken for handling the scenario shall 
be measured in dependence with the associated criticality, risk and probability of the scenario, taking into account the 
costs and resources required for the realization. When the probability of occurrence of a scenario is marginal meanwhile 
its criticality is not high, the prescription of mandatory requirements may not be justified. 

To present the requirements in the scope of the present document, a methodology has been chosen based on the 
following steps: 

• identification of types of actions to be performed during the handling of the emergency case; 

• if applicable identification of the relations involved for these actions; 

• identification of generic telecommunication or information exchange services which can help to perform these 
actions; 

• identification of typical telecommunications services and overlying applications likely to be used in 
performing these actions; 

• tentative combination of the above lists to illustrate a practical application. 

It must be noted that the above methodology is not the unique way to handle the subject. But it appeared appropriate to 
prepare a document enabling to approach the variety of situations encountered in reality as it was clear that no unique 
document can fix the detailed requirements of a given team or entity working in a unique social, geographic, 
administrative and economic environment. 

An alternate methodology would be to examine the historic communication requirements from previous emergencies. 
While this method is being undertaken to provide a guide of services used, it recognizes that communications between 
authorities during emergencies in the past was sub-optimal. Similarly, a historic evaluation cannot in itself identify all 
future requirements. 

5.2 Actions that require Communications 

Communication requirements for emergency services shall be concerned with ensuring that the required information is 
available to the correct person or organization at the appropriate time. 

In essence communications must be timely, relevant and accurate for all actions that maybe undertaken. 

Examples of situations requiring such systems are provided below: 

Mobilization of resources. 

Transmission of updated information on the status of the action. 

Pre-informing related authorities of the services required from them e.g. informing hospital services of arriving 
patients and patient needs. 

Relay of command and control information to the incident area. 

Request and receipt of information from specialist sources where abnormal hazards are involved e.g. hazardous 
materials, biological agents, etc. 

Transmission of video images from an incident to a central command point. 

Transmission of updated information on the state of the incident and status of actions to the ECC and to other 
forces at the site of the incident. 
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Transmission of control information from ECC to the emergency location. This may involve point to point, 
point to multi-point or broadcast communication services. 

5.3 Description of the required communications services 

The efficiency of the emergency operation is dependent upon the ability of the communications network to deliver a 
real-time exchange of information between several authorized emergency personal. This can occur at various levels in 
the emergency situation: e.g. between agents in the field, between agents in emergency control centres and the agents in 
the field, and between a temporary co-ordination headquarters and a permanent emergency control centre. 

The efficient exchange of information may be facilitated by a number of communication services, described below. 

5.3.1 Speech services 

Speech services are currently the most instinctive and most used communication service in emergencies and this is 
likely to remain the case for many years to come. This clause does not imply that a particular technology or switching 
mechanism be employed in the provision of speech services. 

For speech services there exist several universal requirements, characterized by: 

Speech intelligibility: that received speech is capable of being understood reliably, this is required even in the presence 
of high levels of background noise and/or when personnel are under stress or exertion. Another factor which can 
influence speech intelligibility is linguistic differences, where communications involve non-native speakers of a 
language increased speech service performance can negate some of the detrimental effects this can bring to 
intelligibility. 

Call setup-time: short call set-up times enable rapid communication of relevant information. Communication 
mechanisms which require unacceptably long call set-up times may endanger life, or users may resort always on use, 
setting up a connection before it is necessary and keeping it connected when not required in order to avoid an 
unacceptable delay when communication is required. 

End to end delay: in addition to the delays noted for call set-up times, it is recognized that where a duplex voice 
communication system imposes an end to end delay of over 500 ms there is a degradation in the communicability of the 
users. (International telephone connections and circuits - General Recommendations on the transmission quality for an 
entire international telephone connection One-way transmission time, ITU-T Recommendation G.114 [4] 
Telecommunication standardization sector of ITU (05/2003)). 

Speech Quality: although the prime attribute for a speech service in most emergencies will be intelligibility, there are 
cases where high speech quality is desirable. These cases may be when liaising with authorities or organizations unused 
to public safety communications e.g. external specialists; or where a level of trust is required to be established, e.g. 
NGOs, community groups. (as these which may not necessarily be entirely supportive of the actions). 

Within all speech services there may exist a requirement for prioritization and pre-emption of calls. The implementation 
of such features will be dependent on the technology employed, and the use of such features will be determined by 
procedure and doctrine. 

5.3.1 .1 Point To Point Speech Services 

Point to point duplex voice communications are required for many instances to provide communications, particularly 
between different authorities e.g. between commanders of different emergency services, between emergency service 
staff and external specialists. 

5.3.1 .2 Group Speech Services 

The use of group speech services of various types are well established in all fields of public safety, although these 
services are frequently only provided with one service and/or users from one geographic area. 

During emergencies the same communication services will be required, but the personnel utilizing them may differ. 
There will be a requirement in some cases to form groups containing members from multiple services and/or multiple 
geographic units. 
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Sufficient interoperability should be provided by systems to support group services across multiple networks. Interfaces 
between networks should support enhanced speech services such as Advanced Speech Call Items see, EN 301 419-3 [6] 
between networks as well as within them. Team members may be drawn from different services and be issued with 
different communication terminals. Mechanisms to support dynamic creation of multi-service teams are desirable. 

Group services may for example consist of several authenticated emergency agents forming a team for an unlimited 
period of time and are required to be in a permanent relationship. Or it may consist of several authenticated emergency 
agents forming a team for a limited period of time and require a simple procedure to form a relationship, for as long as 
it is required. These teams must have the ability to work undisturbed from other similar teams but still receive 
communications (individual or broadcast) from the organization. 

Each individual in a team may only belong to this one team. Or they may belong to several teams and any 
communication should be able to distinguish the different teams to the authorized emergency agents. 

To facilitate this one or more of the following example services may be utilized: 

Talk Group: Point-to -multipoint group addressed communication established within a selectable predefined area. The 
coverage is associated to the group number and may be different of the total coverage. Resources are allocated all the 
time. Any concerned user may enter or leave the talk group at any time. 

Emergency call (Authority to authority): On a user action a status shall be sent by the terminal. Two options shall 
then be possible (as an operator option): 

Automatic call set-up of a pre-emptive open channel. 

Using a pre-emptive priority, a predefined user (e.g. emergency control centre) shall establish a call chosen on 
an operational basis. For example: Open channel, ambience listening, individual call. 

Ambience listening: This service shall enable a Dispatch Position to place a user equipment into a special type of 
individual call so that the called terminal is transmitting without any action from or indication to the called user. 
Ambience listening is set-up only if the called terminal is not already engaged in a call. 

Intrusion: This service shall allow an authorized user to intervene in an ongoing authority-to-authority call. 

Priority Call: This service shall allow a call to proceed before any other call with lower priority. The priority level can 
be assigned according to various criteria. 

Dynamic Group Number Assignment: This service shall allow a served user or an authorized user to create, modify 
and delete a Group (Dynamic regrouping/Group merging). 

5.3.1 .3 Push To Talk (PTT) / Command and Control (C&C) features 

Especially in emergency situations it is necessary to avoid network congestion. Even in case of high traffic on the 
network communication between individual users (point-to-point) or existing or ad-hoc user groups 
(point-to-multipoint) has to be enabled. It shall be possible to add and remove users from the communication group 
dynamically during the session. 

Communication should require as little bandwidth as possible. Preferably it should not occupy lines permanently (as 
most of the group communication services mentioned above do) but data or voice should only be transmitted if 
information is actually exchanged. This holds especially for emergency communications characterized by many short 
speech items transmitted between talkgroup members over a certain period of time (e.g. giving and receiving 
instructions in C&C communication). 

To facilitate this simplex communication services like Push to Talk can be used. PTT helps to avoid network congestion 
by transmitting voice over a data channel (GPRS, UMTS) and thus can be used even in times of high traffic on the 
communication network. Furthermore PTT provides flexible management of user groups. 



5.3.2 Video Teleconferencing 



VTC may be required to enable effective coordination between services at a command level or below. VTC services 
may be utilized to provide reconnaissance information from the incident back to control rooms. 
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5.4 



Data services 



Data services are used to provide a large number of applications which can have widely differing requirements in terms 
of capacity, timeliness and robustness of the data service. 

Sufficient data bandwidth, in both fixed and wireless networks, shall be provided to support a wide variety of data 
applications required for EMTEL purposes. 

Ideally, this bandwidth shall support the required data throughput and minimize end to end delay, especially for 
applications such as real time video. In the normal emergency case this would require that at a minimum the networks 
shall deliver to the emergency services the level of service as required by the specific regulation. Noting the extreme 
circumstances which may be in force during an emergency, it may be desirable for networks to degrade gracefully when 
user requirements exceed the agreed levels of service. 

Table 1 : Requirements on data applications 



Service 


Throughput 


Timeliness 


Robustness 


Email 


IVIedium 


Low 


Low 


Imaging 


High 


Low 


Variable 


Digital mapping / 

Geographical information 

services 


High 


Variable 


Variable 


Location services 


Low 


High 


High 


Video (real time) 


High 


High 


Low 


Video (slow scan) 


Medium 


Low 


Low 


Data base access (remote) 


Variable 


Variable 


High 


Data base replication 


High 


Low 


High 


Personnel monitoring 


Low 


High 


High 



Throughput: data volume in a given time (could put numbers to this e.g. Kbps, Mbps etc). 

Timeliness: importance of the information arriving in an agreed space of time. Again, you could put numbers to this e.g. 
position information needs to be delivered within 5 seconds. 

Robustness: how reliable the information transmission needs to be. E.g. a bitmap image with some errors is still 
useable, a JPG image with some bit errors may be unreadable. 

Table I shows the diverse needs of data applications. Where data applications share the use of a data transmission 
capability, provision of sufficient capacity and effective management must be provided to ensure application data is 
communicated appropriately. 

Some applications may be used with dedicated communication assets which will be tuned to the particular needs of that 
application, although interfaces may be necessary to exchange data from such dedicated systems with other applications 
e.g. screen capture one frame from dedicated video transmission equipment and email the resulting still image. Where 
appropriate such applications should be based on appropriate standards to facilitate information exchange. 

Specific applications are listed in the following clauses. 



5.4.1 Paging Services 



Paging services are used by a variety of authorities in order to contact their personnel, and paging services are available 
from a variety of networks and technologies. The network needs to be able to identify the requested authorized 
emergency agent(s), and then deploy the appropriate technology to contact them. This requirement may encompass 
different communication network technologies, services and applications such as paging, presence, texting etc. 
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5.4.2 Status Monitoring and Location Services 

Status monitoring may include breathing air tank levels, accountability monitoring, distress buttons and vital signs 
monitoring. Location services provide real-time information regarding the position of personnel or vehicles to a 
command point. This information may also include status information regarding the person or vehicle. These services 
will use wireless networks only. The service may require frequent transmissions to update position; the size of message 
is likely to be short when location is based on satellite-based solutions, but can be quite extensive when used inside 
burning buildings where other technologies have to be used. Location reporting services may be one-way with no 
acknowledgement, necessitating a robust communication mechanism. Position information may be considered sensitive 
in some emergencies and may require security mechanisms to protect the data. 

5.5 Interoperability of Communication Services 

Voice communication services are generally possible across heterogeneous networks, although there may be loss of 
functionality where special services are available (see clause 5.4.1.2). Where different techniques are used for voice 
encoding there may be additional loss of intelligibility and quality due to the need to decode and re-encode the voice 
signals. 

Data used by applications in emergency scenarios may need to flow to multiple sources. Applications must therefore be 
able to communicate with one another and present data in a format which is useable by other applications. 
E.g. situational awareness applications may benefit from inputs from other systems e.g. aircraft movement, automatic 
vehicle location, maritime distress systems etc. A high level of interoperability between different systems and 
applications allows information to be communicated rapidly, widely and effectively to all relevant parties. 



5.6 Example application 



The application selected is the management of several field teams in an emergency situation requiring different 
expertises. 

The needs are supposed to be limited to one specific area. 

They can imply the following relations (see references in point 4): 4-1 (PSAP to operation centre), 4-3 (coordination 
between different operation centres), 4-4 (Op Centres with field teams) and 4-5 (between different field teams). It may 
be necessary to have relations of 4-2 type (coordination with other PS APs) pending on the size or the location of the 
event. 

The type of actions required cover mainly: 

Mobilization of resources. 

Transmission of updated information on the status of the action. 

Pre-informing hospital services of arriving patients and their needs. 

Transmission of images from an incident to the emergency control centre. 

Real time combination of actions between the different teams. 

The relations-actions matrix can be developed in order to explain what kind of services are to be provided trough the 
communications system. In the present application, and except for the 4-2 type of relations, all services must be mobile 
and on a radio carrier system. 

An example of the full analysis is given hereunder; the resulting matrix can be used as the basis for preparing the terms 
of reference of the required system, if we are in a procurement process. One important point is to provide 
interoperability between different teams. The obvious solution to have a unique platform can not always be available; 
teams are then under different systems. The connection will go through switching and connecting arrangements 
between these two systems; which in general reduces or forbids the VPN between all actors, losing advantages of an 
easy interconnection. 
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Table 2: Relations-Actions matrix (Illustrative) 



Actions 
Relations 


Mobilization of 
resources 


Transmission of 

updated information - 

status of tfie action 


Pre-informing 
liospital services 


Transmission of 

images to the 

ECC 


Real time actions 

between different 

teams 


Section 4-1 


Yes 


Yes 


N/A 


Yes 


N/A 


Section 4-2 


Yes 


Yes 


N/A 


N/A 


N/A 


Section 4-3 


Yes 


Yes 


Yes 


Yes 


Yes 


Section 4-4 


Yes 


Yes 


N/A 


Yes 


Yes 


Section 4-5 


Yes 


Yes 


Yes 


N/A 


Yes 





Scalability 



Scalability is an important consideration especially when the communications system (networks in combination) handle 
the escalation from a case involving e.g. one ambulance and one Emergency Centre to national authorities (Regional 
Control Centres, Ministries, Municipal authorities as well as local services). 

To fulfil this objective some descriptions may be useful: 

Contingency planning, see annex B. 

Organization of authorities in case of catastrophic event, see annex B. 

Emergency Preference schemes and traffic management. 

6.1 Priority schemes and traffic management 

The objective of rescuing injured or endangered people calls for arbitration of the emergency authority's representatives 
access and use of scarce or privileged resources. Such schemes can be permanently assigned or activated when the need 
arises in connection with the escalation of the disaster and a pre-organized contingency plan. 

Additionally, in cases where the crisis event impacts on a significant portion of the population, panic attributes that the 
demand for information may raise the traffic demand on the telephone and data networks to unacceptable levels, putting 
at risk the resilience of the network itself. See ITU-T Recommendation E.409 [3] for information on the nature and 
scales of network resilience security threats and events to be planned against. 

Priorities for certain types of calls and access to data services should be described in a comprehensive scheme, that 
enable priority or essential traffic to be maintained at the risk of allowing other types of traffic to be degraded. Such 
schemes require contingencies to be described considering a break down for regional or localized eventualities. These 
plans also require the protection of all essential stakeholders in the foreseen contingency, including the involvement of 
public and political authorities, representatives or emergency services, operators and secondary support organizations. 

The model of an Emergency Preference Scheme should serve as guidelines for the purpose of the foreseen risk and may 
lead to the imposition of Traffic Management techniques by the network operators to ensure spare capacity is 
maintained to cater for the expected needs that may be foreseen for the continued support of essential and emergency 

services. 

Private radio communication networks are dedicated to emergency services and as such traffic is guaranteed to the users 
during the emergency. Priority can be between emergency users (e.g. according to rank/function). 



6.1.1 Traffic Management 



In general, an emergency situation will not directly affect the infrastructure and the performance of the communications 
networks. 

Nevertheless, situations may arise where this is not the case. In such a critical emergency the additional bulk of traffic, 
caused by the crisis, can lead to saturation of the network. In such cases it is a vital requirement that the Network 
Operator take measures to mitigate against the possible failure of their network. To obviate these consequences and to 
maintain the access to the network resources required by authorized representatives, in the exceptional time, the 
operators should be prepared to activate traffic management measures. 
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In general such measures, taken for the sake of the interest of emergency communications, will require the decision of 
the administrative authority, to mitigate the concerns of users who lose access rights, and to nominate those whose 
traffic involved in the emergency situation is subject to protection. 

However, measures to protect the integrity of the network may under normal times of exceptional load be employed by 
the operators on a purely statistical basis. On such occasions, handling of emergency calls may be protected against 
loss. 

By definition a private radio communication network shall be dimensioned to handle the emergency team's high traffic 
particularly in a small area. It shall be possible to dynamically configure the traffic management for the emergency 
location. 

6.1 .2 Emergency Preference schemes 

An example of A Network Access based Call Preference Scheme has two levels of control: 

1) a basic national end-to-end call set-up protection of priority Network Accesses from restrictive transport and 
termination controls, and a further 

2) more severe regional protection of priority Network Accesses from restrictive originating network controls. 

The basic functional requirement is for a preference scheme available, but not invoked, on all fixed Network Accesses 
to provide an enhanced probability of achieving successful completion of the call attempt to the termination across all 
networks, for nominated Network Accesses of essential users. Normal Call Unsuccessful conditions permitting (Busy, 
No answer, etc.) the requirement is for the protection of the call set-up and call delivery to the point of termination. This 
capability is required to be available nationally, across all networks on a licensed equitable basis. 

The Network Access based Call Preference Scheme is normally dormant. The state of Network Access based Call 
Preference Scheme is always available, but under normal conditions not activated. Once activated, the Registered 
Network Accesses of Nominated Essential Users will automatically invoke the enhanced Network Access based Call 
Preference Scheme whenever a call is placed. Network Management controls are required for Activating, Deactivating 
the service and registering the Network Accesses of Nominated Essential Users. 

The more severe form of control protection of priority Network Accesses from restrictive originating network controls 
would be introduced only within parts of the network that are affected severely. This geographic form of control would 
be applied as a network protection and severe form of a network traffic management measure. However the case of 
network failure/disaster cannot be foreseen and clearly may not affect other networks. See ITU-T Recommendation 
E.409 [3] for information on the nature and scales of network resilience security threats and events to be planned 
against. 

The escalation from an activation of the basic enhanced Network Access based Call Preference Scheme to the more 
severe localized level of the service will also require Network Management controls. A procedure will be required for 
local escalation and de-escalation of the network traffic management measure. 

NOTE: A Network Access based Call Preference Scheme provides priority service to the Essential users 
nominated Network Access (es), it is not provided personally to the user themselves, as this adds 
immediate complexities. 

Additionally, A User based Call Preference Scheme have two features: 

1) a protected Priority Access Code, and 

2) a user based validation platform. 

The protected Priority Access Code employs similar features to the Protection priority of el 12 access and the Network 
Access base Call Preference Scheme. Subsequent user request being validated and authenticated the terminating leg of 
the call set up may also employ the protection afforded to the Network Access base Call Preference Scheme. 

See International Emergency Preference Scheme ITU-T Recommendation E.106 [e.l06] and interworking with national 
schemes. 

Private radio communication systems are dedicated to emergency services and as such shall be dimensioned to handle 
the peak of traffic exclusively for them. Yet priority call shall be available to allow authorized users to intervene when 
needed. 
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6.1 .2.1 Interaction with the Emergency Call service el 1 2 

Once the severe category of this Enhanced Network Access based Call Preference Scheme has been activated, all 
Network Accesses should still provide access to Emergency services ell2. The Network Access based Call Preference 
Scheme will allow essential and non-essential users the ability to make el 12 calls and to access whatever parts of the 
network are still available. 

The nominated Network Accesses of essential users will not get access to reserved resources, e.g. trunk reservation, as 
is the case of the Emergency services themselves. This implies no additional Network Management overhead. 
Therefore, within the Network Access based Call Preference Scheme network accesses will get a priority service 
handled similarly to the Emergency Services el 12, without access to reserved resources, but with the ability to 
terminate to any termination. 

NOTE: The level of priority could therefore bee seen as lower that that of the essential Emergency Services e 1 1 2 
themselves. 



7 Requirements applicable to the Network(s) and user 

services, services to support and the network 
features and capabilities 

7.1 Recognition and treatment of emergency services from the 
view of the service 

7.1.1 Transmission quality 

Apart from defining an appropriate minimum bandwidth that is needed to provide a specific emergency service, one of 
the most crucial problems that have to be solved is assuring a sufficient transmission quality. Depending on which 
communication channels are used and which services have to be provided, the requirements will be completely 
different. 

Some of the most important quality parameters for connectivity and their significance for different communication 
services are discussed in the following points: 

High availability and reliability are desirable for any kind of connection (but especially important for applications 
where the stability of the connection is crucial such as heartbeat monitoring for rescue workers). In any case the 
restoration time (i.e. the time needed to restore the required QoS after a service disruption) of the connection should be 
kept as short as possible. 

Though a low error rate is always desirable, for transmission of speech or data that is highly redundant or can be 
interpolated (like video streaming) the acceptable error rate can be considerably higher than for more sensitive data. 
However for applications like heartbeat-monitoring a very low error rate must be guaranteed. 

The time it takes to get information across a network (latency) is a parameter that is relevant to nearly all applications 
that use network connections as high latency implies that the user will have to wait for the application to react to his 
actions. Note that e.g. for voice calls the latency itself is annoying but not necessarily a crucial problem as human actors 
are fault tolerant and can deal with a certain degree of delay. However the variation of latency for transmitted data 
packets (jitter) is particularly disruptive for voice calls as well as for other real-time applications like video monitoring 
as it will disturb the transmission of the data stream. 

The dropping of data (packet loss) might cause a temporary failure of the transmission. Compared to data traffic, video 
streaming and voice traffic are quite robust to loss ratio. However in data-oriented traffic (e.g. network connections 
using TCP/IP) the fact that some data packets did not reach their destination might cause the protocol to terminate the 
connection. 
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For speech transmission in emergency situations there is often a trade-off between connectivity and call quality (that 
can be measured e.g. through the Call Quality Index (CQI) proposed in ITU-T). Connectivity is often the more 
important factor as long as a certain minimum (baseline) call quality is provided. 

For example whenever a lot of users are trying to make voice calls in parallel (which is most likely in case of an 
emergency), it will be more preferable to enable most of them to make calls below the baseline quality normally offered 
to them than to give high quality connections to a few of them while shutting out the others. Human actors can deal with 
low quality speech e.g. by repeating their messages whenever they notice that the connection quality gets to poor. 

For critical transmission channels asking for best-effort services is definitely not enough. Especially real-time 
applications like video-streaming or Voice over IP will need a minimum QoS to be fully functional. For every 
communication service used by the authorities, it will be necessary to define a minimum transmission quality for speech 
and/or data that has to be available to ensure that the service can be provided properly. 

7.1 .2 Ensuring conveyance of communications 

Network operators shall make every reasonable effort to ensure the answering, inter-network forwarding and 
termination of inter-authority calls, including in exceptional circumstances such as crises, catastrophes, etc. See ITU-T 
Recommendation E.409 [3] for information on the nature and scales of network resilience security threats and events to 
be planned against. 

7.1 .3 Assignment of inter-autinority calls to the appropriate authority 

A fleetmap structure makes it possible for different groups of personnel to access department specific and common 
group structures. 

Common groups across different authorities should be available to improve interactions in common operations. 

Common groups should be able to include users from different networks, in order to facilitate both cross border 
operations and country specific operations. 

All users shall be able to communicate with their respective emergency centres and with each other. The emergency 
centres should communicate with all users regardless of their position within the network by means of: 

• Group calls. 

• Individual calls. 

• All kinds of mode of voice and data communication. 

• Simultaneous voice and data. 

Users from other departments and authorities should be able to access specific groups based on case-by-case admission 
authorized by the respective emergency centre. It should be possible to define groups limited to a geographic area. 

The authority should be able to create and use dynamic groups, e.g. it should be possible to drag and drop users in to the 
dynamic group and use the air interface to distribute this information to selected users. 

7.1 .4 Preventing effects of discrepancies in coverage 

7.1 .4.1 Radio Coverage Limit cases between mobile networks 

Due to physical uncertainty and variations of radio coverage limits there are border effects where an emergency call can 
not be routed to the geographically assigned centre. Attention should be given to all parties involved, and more 
specifically operators, when designing the network to limit the occurrence of such cases. Where this case occurs, 
cooperation of emergency control centres should be applied and organized as appropriate. 

7.1.4.2 International cooperation 

A situation similar to that described in clause 7.1.4.1 may appear near country borders: Cross-border emergency call 
handling requires international cooperation between the European emergency organizations of neighbouring countries. 
See clause 7.2.6. 
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7.1 .4.3 Cordless technologies 

As in SR 002 180 [2], may not belong under the same heading as the ones above. 

Situation similar to those described in clauses 7.1.4.1 and 7.1.4.2 may be applicable as well to cordless technologies that 
use fixed-line networks. 

7.1 .4.4 Interworking of Technologies 

Different authorities and rescue bodies may rely on different communication technologies for their field actions 
(e.g. Analogue PMR, TETRA, Tetrapol, GSM-R and VHP Maritime frequencies). Attention should be given to ensure 
proper communication between such systems not restricting the efficient cooperation between field personnel and the 
emergency centre in charge. 

7.2 Recognition and treatment of emergency services by the 
originating network 

If a virtual net is established for emergency work, with subscribers in different networks, this may be an issue for 
consideration. 

7.2.1 Call-relate(d information 

Information from the Emergency Call shall be forwarded along with the Emergency call to any authority 
Representative. Also, call Related information originated by an Authority Representative shall be transmitted on inter 
authority communications. 

7.2.1 .1 Indication of the (emergency) caller's location 

Location Information from the Emergency Call shall be forwarded along with the Emergency call to any authority 
Representative. Also, call Related location information originated by an Authority Representative shall be transmitted 
on inter-authority communications. 

7.2.1 .2 Identification of the mobile terminal equipment 

Mobile Terminal Equipment Identity Information from the Emergency Call shall be forwarded along with the 
Emergency call to any authority Representative. Also, Call Related Mobile Terminal Equipment Identity information 
originated by an Authority Representative shall be transmitted on inter authority communications. 

7.2.1 .3 Interworking of Technologies 

Call Related data originated by any Authority Representative shall be transmitted on inter authority communications 
independent of the use of differing technologies, e.g. location information. 

7.2.2 Network icjentification 

Network Identification Information from the Emergency Call shall be forwarded along with the Emergency call to any 
authority Representative. Also, Network Identification information originated by an Authority Representative shall be 
transmitted on inter-authority communications. 

7.2.3 IVIinimum power supply for authority representative user accesses 

If feasible, fixed network operators should provide a minimum power supply at their network termination points. This 
minimum power supply should enable telephone terminal equipment connected to the network termination point to be 
operational in the case of a local power failure. 

NOTE: Emergency Authorities are expected to have their own policies for guaranteeing Electricity supply for 
terminals, generators battery back-up, etc. 
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7.3 Requirements on call handling between networks 

7.3.1 Handling of inter-Authority calls between networks 

Handling of inter- Authority calls between networks will proceed in the normal way as normal calls between networks 
with the associated call priority information to alleviate the call from restrictive network management controls, as 
specified in clause 6.1. 

7.3.2 Interworking with carrier selection/carrier preselection codes 

Interworking with carrier selection/carrier preselection codes needs to be considered as authorities may chose to change 
supplier, but shall work in the normal way. 

NOTE: ITU-T Recommendation E.106 Carrier Selection may be overridden for International Preference 
Schemes. 

7.3.3 Inter-Authority communications from other countries 

International Assistance Treaties commonly exist across local borders Land/Sea, e.g. France/Switzerland in the area 
around Geneva, UK/France in the Channel, UK/Norway in the North Sea etc. 

Call handling between international networks shall have the following functionalities: 

• Integration into foreign talk groups. 

• Contact with own dispatching unit (ECC). 

• Emergency call handling in foreign networks. 

• Data transmitting for status messages and automatic vehicle location. 

• Individual call and phone call. 

For call handling from other countries the network must provide the following services: 

• The display of the handset has to show the active network. 

• Selection of the preferential network. 

• Identification of group members. 

• Use of DMO (Direct Mode Operation). 

NOTE: For call handling between Tetra and Tetrapol networks, the Helsinki report (ETSI/ GA32(99) 04) 
provides different solutions. 

7.4 Providing termination of Inter-Authority calls for the relevant 
authorities 

Any network to which the points of access to Authorities are directly connected should deliver the emergency call to the 
authority together with any related data, without undue delay or modification. 

If the appropriate authority is not reachable, the call must be forwarded to the alternative nominated authority. 

Terminating networks to authorities should meet the functional requirements as agreed to where possible ensure the 
continuity of the access to the authority. Call Diversion Deflection, Load balancing, etc. 
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The Network operator will be expected to protect the integrity and ensure the survivability of their network, according 
to nationally agreed objectives. This may be achieved by employing No Single Point of Failure within their network 
equipment. See ITU-T Recommendation E.409 [3] for information on the nature and scales of network resilience 
security threats and events to be planned against. 

It is also required, where possible and agreed in the Service Level Agreement, to guarantee that the access required by 
nominated authorities can have an enhanced survivability in the case of load or disaster. This may be achieved by 
employing No Single Point of Failure, at the access. 

7.5 Network Management support functions for delivery of 
Inter-authority calls 

7.5.1 Priority of inter-authority emergency communication 

Inter-authority calls may be afforded preference status as nominated their use in a Call Preference Scheme in times of 
disaster. This preference should be accorded across public telecommunications networks. 

7.5.2 Monitoring of the lines and availability of the Authority 

Transmission lines over which emergency telephone services are connected should be available without restriction. The 
terminating network and the Authority permanently monitor the functionality and transmission quality of the 
transmission lines. Technical modifications and maintenance should not impair emergency telephone lines to the 
Authority. If the quality falls below a minimum threshold the network and authority should deactivate the access and 
check the availability and quality of the connection. Any such deactivation should not affect any call in progress. 

7.5.3 Diversion of Inter-Authority calls 

If a network access to an authority is deactivated or out of order the network must be able to divert incoming emergency 
calls to back-up/alternate equipment, lines, network access, if required by the authority. The authority shall inform 
network management organization operations staff of these back-up facilities and any modifications made. 

7.5.4 High or Resilient availability 

Subject to the nationally agreed Service Level Agreements, Network operators should use network management 
measures to ensure the termination of inter-authority calls. 

7.5.5 Security provisions at the access to authorities 

The network operator should make reasonable provisions to mitigate against the impact of attack, either deliberate or 
accidental, to the access and core networks to which authorities are connected. 



8 Security 

8.1 Role of National Communication Security Authorities 

For many governmental organizations including public safety, responsibility for communication security lies with a 
national communication security authority. Any mechanisms employed in communication systems used by such 
organizations shall meet the specific requirements laid down by such national authorities. International coordination 
exists between many NCSAs, embodied in the Common Criteria ISO/IEC 15408 [5] and the ITSEC arrangements 
which are accepted by most Europe governments and the European Commission. 

Users, equipment manufacturers and service providers are advised to contact the relevant national authorities in order to 
establish the relevant security requirements for particular communication services. 
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8.2 General Security Issues 



For all emergency communication, the organizations involved have to make sure that data is protected according to its 
sensitivity level during transmission, processing and storage and that access to communication channels and critical 
systems is only granted to authorized persons. In the context of emergency communication several security 
requirements have to be discussed: 

• Confidentiality of data. Whenever confidential data is transmitted it is necessary for each party involved that 
they can rely on the fact that no eavesdropper gets hold of it. According to the degree of its confidentiality the 
data must be transmitted via secure channels and protected by encryption during transmission and storage. 

• Protection of signalling information, to prevent denial of service attacks or traffic analysis. 

• Authentication of persons or devices. All persons (and devices, if necessary) involved in critical 
communication shall be provided with means to authenticate themselves. It should be possible for them do to 
so without having to trust or even know each other, especially in scenarios where ad-hoc communication has 
to be provided to parties that can not communicate via secure channels established in advance. 

• Authorization. Access to confidential information and critical systems is restricted to persons with appropriate 
entitlement. 



• 



Integrity of data. Each of the parties has to be able to control if the data they get is complete and correct and if 
it was changed during transmission. 

• Non-repudiation. None of the parties involved in the communication should be able to subsequently deny that 
they took part in the information exchange and the commitments they made during the communication. 

• Logging. Records of communications should be available to protect users. This information may also assist 
with subsequent assessment of the emergency. 

Many public safety services already possess some degree of security to prevent eavesdropping and denial of service. 
Some systems will not operate without security mechanisms being in place. However, it is essential that in an 
emergency appropriate security mechanisms will be supported without detracting from the usability. 

8.3 Interconnection of secure communication systems 

As communication systems employed by many public safety organizations operate in conformance with security 
requirements issued by NCSAs there may be significant difficulties in supporting interoperability between systems. 
Ad-hoc solutions to these problems are generally unsatisfactory and result either in a loss of security as all users fall 
back to operating in non-secure mode, or in the loss of all but basic services as interconnection is proved only through 
"red gateways" or "swivel chair interoperability" (where a single user is provided with terminals for multiple systems). 

Significant pre-planning and co-ordination of security solutions is necessary in order to support interoperable secure 
voice and data services between different user communities and across different networks. 

These requirements can be fulfilled with a variety of security mechanisms which are described in annex C. 
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Annex A (normative): 
Basic Architecture 



Figure A. 1 represents the basic architecture and the interfaces between authorities where the Rx are the numbered 
reference points for identification and showing the interfaces. 
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Figure A.I : Basic Archiitecture 



ETSI 



26 ETSI TS 102 181 VI. 1.1 (2005-12) 



Annex B (informative): 

Organizational related issues for Authorities to Solve 

Telecommunications systems or operator services cannot answer all the cases. It seemed convenient in the present 
document to draw the attention of public authorities on some situations where a fair level of performance can only be 
reached if organizational decisions are taken by them (local, regional, national and international. 



B.1 Handling of foreign languages 

In the case of communications between authorities, and compared to the case of receiving the emergency calls, the 
problem may be simpler (often between neighbouring countries and a good probability to have on both sides bilingual 
people). But in general, the solution cannot rely on a statistical hypothesis and requires a minimum training of staff and 
specific agreed procedures or definition of contacts points for example. 



B.2 Mitigating consequences of radio coverage 
discrepancies 

One possible consequence is that some calls may arrive on a wrong destination (presumably in a neighbouring area). 
Staff in this situation must be informed and know how to act to transfer the call or answer to the caller, without delay. 

B.3 Definition of priorities (list of beneficiaries, levels, 
conditions of effective implementation) 

The policy in priorities is clearly a political issue. It can be expressed through lists or plans. For a given area, the 
preparation of such plans should be made in a collaborative way with the operators and users (rescue services), initiated 
and coordinated by the concerned administrative authority. An International Emergency Preference Scheme (lEPS) is 
defined in the ITU Recommendation E. 106. 



B.4 Contingency planning 



The entities and relations Special Task Force, Temporary Headquarters and Administrative Entities or Secondary 
response organizations will appear in disaster situations as soon as the events have reached a predefined level of 
importance. 

This may not be just a question of the regional coverage or a disaster event or of number of casualties, but the need to 
call on other organizations to perform secondary tasks (e.g.: cut the water or gas supply to avoid a risk in the vicinity of 
an accident with specific conditions); some of the situations require only a normal means of communicating between 
the Emergency Control Centres and corresponding technical operation centres. 

But it is clear that all authority representatives must be ready to face dramatic events, where the normal existing centres 
will be overloaded with calls and tasks to prioritize. 

The prerequisite for facing this sort of situation relies in the hand of the national or local authorities who have the power 
and the responsibility for fixing the frame of adequate plans, obtain or impose agreement from all Authority 
representatives and making available some needed contingency resources. Also, they will often take the decision of 
declaring a crisis status, condition for activating the exceptional plan. 

The cases where Emergency Control Centres need to invoke a contingency plan are dependant on a lot of factors, for 
example: the need for extra resources, simultaneous actions of various disciplines (fire and medical, road traffic, fire 
etc.), general organization, geographical distribution of resources, etc. 
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As a result relations between authorities, and their need for communications can be based on a regular and daily routine, 
but may be required to escalate to cater for exceptional cases, and specially faced to dramatic events. 

In the case of dramatic events, it is advisable to have plans pre-defined in order to be activated on request of one of the 
emergency centres or on demand on an administrative body (e.g. the prefet in France). In general the plan will include 
several actors outside the emergency centres themselves (private companies of ambulances, private doctors, technical 
services of companies operating facility services etc.). 

Such plans may consist of: 

• lists of designated contacts and their co-ordinates; 

• basic organization scheme; 

• priority schemes (categories of priority, list of people authorized according to each category); 

• procedures for requesting the activation of priorities towards the telecom operator (s); 

• procedures for updating and change of the previous info; 

• procedures for cancellation of the exceptional situation, end of the plan and return to normal; 

B.5 Organization of authorities in case of catastrophic 
event 

Most countries have a concept of Levels of authority and assistance that can be called on in major catastrophes. In 
normal Emergencies the Primary authorities and organizations can be relied upon to react to the situation. In More 
serious emergencies three general effects take place. First Mobile Emergency Control Centres are created. This enables 
the resources of the Primary authorities to be concentrated and managed closer to the disaster. An example of this is 
Mobile Medical Units that are sited close to a train crash. The Second Effect is the escalation toward greater 
administrative control. In which case contingency plans exist for the Local/Regional/Central Government to provide 
resources, evacuation, planning of transport, food etc. Thirdly, Secondary Assistance can be called on where 
commercial organizations that provide essential services are called on under special legal conditions to restore water, 
electricity, repair roads, communications, etc. An Example of a Secondary Assistance may be a Vet who is called on to 
provide assistance to a Fire/Rescue Organization. Non-Governmental and charity Organizations with special recognized 
expertise may have continuing legal authority in one Country but be designated as Secondary assistance organizations, 
e.g. the RSPCA in the UK. 

In Differing countries the definition of the Primary Authorities, The Emergency responsibility of Political Authorities, 
The legal Mandates on Secondary Organizations in an Emergency situation vary. But the general concepts remain true. 
These differences are not the aim of the present document. 

The communications needs for the escalation is paramount to the present document. The provisions of communications 
to Primary authorities need to be considered in the context of the need where an Emergency can rapidly escalate and a 
Mobile Emergency unit and/or control centre is required. In these cases a Mobile Emergency control centre is a means 
of concentrating resource hence it may be seen as subsidiary to a fixed Emergency Control Centre. A Mobile 
Emergency unit and control centre has greater communication needs than a normal response unit. For example, a 
Mobile Hospital may have needs for Video Relay of consulting to other hospitals for advice on treatment, operations, 
radiology, etc. The requirement for Guaranteed QoS data services is therefore much greater in this context. 
Communications for Emergency services shall be scalable in terms of numbers of users and bandwidth. 

The Communication Needs for Mobile Emergency unit and/or control centres are: 

• Guaranteed QoS data services. 

• Priority Access to other peer level and supply Organizations. 



• 



Ability to call on recognized experts (Doctors, Midwives, Chemical Experts, etc.) and equip them with 
intuitive communications. 
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The Communication Needs for Local/Regional/Central Government control and planning during disasters are: 

• Priority Access to Other Governmental, Primary, Secondary and Supply Organizations. 

• May require International Communication for Cross-border assistance, e.g. a ship sunk in a common 
international sea-lane. 

The Communication Needs for Secondary Assistance Organizations that provide essential services are: 

• Priority Access to Governmental, Primary, Other Secondary and Supply Organizations. 

• May require International Communication for Cross-border assistance. 

• May require teams of people to gain Temporary Authorization as an Authorized Emergency Organization, 
Electronic authorization. 

• Require Access to the Emergency Communications Features of the Primary Authorities during the 

repair/crisis. 

• May require teams of people to receive compatible communications equipment when called on to travel across 
national boarders, e.g. Authorized UK Electricians assisting the repair of the French Electricity network after a 
Hurricane. 

B.6 Communication between civil authorities and 
non-governmental organizations 

NGOs are frequently closely involved in the response to emergencies. While this involvement may not take place in the 
hours immediately after an incident, they may form a vital part of the response to an incident. It is essential to 
coordinate with NGOs, both for protection of NGO staff and for effective liaison and sharing of information between 
NGO and authorities. 

B.7 Communication between civil authorities and press 
organizations 

Emergencies are news. Although this is not a high priority, communications support to emergencies should plan to 
support some degree of communications with the press organizations. Procedures should be in place to ensure that the 
channel used to press organizations involves checks on the releasability of information. 
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Annex C (informative): 
Security mechanisms 

The following techniques may be utilized in order to provide security features described in clause 8.2. 

C.1 Symmetric encryption schemes 

Two parties A and B agree on a secret encryption key either during a personal meeting or by communication on a 
secure channel. A message one of the parties encrypted using this secret key can only be decrypted by the second party. 
If their secret key is compromised, A and B must agree on a new key. Symmetric encryption schemes run much faster 
than asymmetric schemes but they do not allow spontaneous interaction between parties who do not know each other. 
Another restriction that occurs with symmetric encryption is key management, as every pair of participants in the 
scheme has to find a way to agree on different keys and store all those keys safely. 

It is a common characteristic of emergency communications that typical communication channels for standard 
situations will be known prior to the real emergency case, so secret keys can be exchanged before an emergency occurs. 
Thus symmetric encryption is the preferable method, especially for real-time communication such as voice calls that 
would suffer from any decrease in performance. 

C.2 Asymmetric encryption schemes 

Party A chooses a pair consisting of a private key it keeps secret and a public key it publishes for everyone to know, for 
example in some public directory on the internet. It is not possible for anyone to compute A's private key from the 
public key. If Party B wants to encrypt a message to A, it gets the public key and does so. Nobody but A (who knows 
the private key) can decrypt this message. Every participant in the scheme needs only one pair of keys. The key 
management, however, has some difficulties and requires some kind of Public Key Infrastructure. To link a key to its 
identity. Party A has to have the key signed by a Certification Authority. Anyone who trusts this authority can check the 
signature by using the authority's public key that is generally known. Problems can occur, if there is no third party that 
A and B both trust. Asymmetric encryption schemes allow spontaneous secure communication between strangers as 
everyone, who wants to send a message to A, can get the appropriate public key and use it for encryption. A 
disadvantage of the publishing of the key occurs when A's private key is lost or compromised and has to be changed. A 
cannot know for sure who got the old public key and warn these persons, not to use it anymore. All A can do is publish 
the key on a revocation list and hope that B will look into it before encrypting a message with the compromised key. 
It will be necessary to use asymmetric encryption if non-standard situations occur during the escalation of an 
emergency, e.g. if parties from different countries have to exchange information without having had the chance to 
establish secure communication channels in advance. 



C.3 Hybrid encryption schemes 



To enjoy both the benefits of symmetric encryption (e.g. better performance) and those of asymmetric encryption 
(e.g. spontaneous confidential communication between parties that have not had the chance to agree on a shared secret 
key prior to their communication) a hybrid scheme could be used. This means that the involved parties use asymmetric 
encryption to agree upon or exchange secret keys in a setup phase of the communication after which they will be able to 
continue their information exchange using symmetric encryption. 

Hybrid schemes will be helpful in situations that require spontaneous information interchange as well as excellent 
performance and where asymmetric schemes would have to be used otherwise. 
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C.4 Digital signatures 



Party A signs a message by creating a hash value of it, to which it applies an asymmetric encryption algorithm 
involving its private key afterwards. The result of this process is a digital signature of the message that A can send to B 
or publish along with the original data. Everyone can use A's public key to verify both that the signature is valid i.e. that 
the message was really signed by A and that the content of the message has not been altered after the signature has been 
made. In addition A cannot repudiate the message afterwards, as a valid signature can only be created with A's private 
key. Thus digital signatures are a means to ensure non-repudiation as well as sender integrity and data integrity. 



C.5 Authentication methods 

Depending on the criticality and sensitivity of the concerned data and communication, various means of authentication 
could be used. The simplest method providing a basic security level is having the users identify themselves with a 
username and password. For stronger authentication One-Time Passwords or certificates stored in software or on 
smartcards are the preferable means of authentication. The use of digital certificates issued by trusted organizations also 
provides the advantage of spontaneous authentication between parties that have not been in contact before. 



C.6 Authorization schemes 



For all critical systems and resources as well as for all sensitive data there should be strict rules defined as to who is 
allowed to use, change and delete them. This ensures that only authorized entities can log into the system and only work 
with the data and use the resources they have been explicitly allowed to access. The most efficient way to handle 
authorization is to assign access rights to the role a group of persons are playing in the organization rather than to the 
persons themselves. This makes the management of rights easier and allows a quick replacement of people in case of 
illness, vacation or termination of the work contract of a role bearer. Every role should only be assigned only the 
minimum rights that are needed to fulfil its tasks. Accounts should not be shared between several people so it will be 
possible to identify who exactly is responsible for which actions. 



C.7 Logging 



Logging mechanisms do not prevent attacks or access to data without permission, but do at least store these events. 
Thus it is possible to identify attacks or attempts of attacks (and hopefully stop them before too much harm is done) and 
use this information to prevent further disruption of the system. 



C.8 Virtual Private Networks 



A VPN can be used to facilitate joint or co-operative actions; this may be deployed on a permanent basis between 
entities acting within a common area, specially if there are not collocated. 

However a VPN may be required for temporary situations where an ad hoc co-ordination levels may have been created, 
e.g. Between PSAPs, and emergency control centres a permanent VPN can be established to facilitate the relationship. 
A temporary VPN may be established between emergency control centres and a mobile co-ordination centre of an 
emergency, this may then be extended to individual emergency service personal. 

VPNs provide services such as Closed User Group, On-Net/Off-Net, On-Net Authentication, On-Net Encryption, 
On-Net Priority and Pre-emption, Authorization to Intrude/Pre-empt, Authorization to not be able to Intrude/Pre-empt, 
Place Priority calls On-Net/Off-Net. Secured Long Tail Access, Service Integrity, Secure data services. Encrypted data 
services. High Integrity data services, etc. 
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Annex D (informative): 

United Kingdom Interoperability Agreement between Chief 
Fire Officers Association, Ambulance Services Association, 
and The Assistant Chief Police Officers Association 

1 Responding to Catastrophic Incidents 

1 . 1 The existing joint policies and practices of the emergency services to major incidents remain the foundation 
upon which to review our responses to catastrophic incidents and to incidents involving the release of 
chemical, biological, radiological or nuclear (CBRN) agents. 

1.2 The emergency services are still assessing the lessons for the UK from the events in New York on 

1 1 September 2001. However, with regard to communications at such incidents, two lessons are clear: 

(1) in principle, there is a need for emergency services and their control rooms to be able to inter- 
communicate irrespective of the organizational boundaries and location within Great Britain; 

(2) those communications to be resilient. 

2 Responding to CBRN Incidents 

2. 1 Planning for CBRN incidents must include mutual aid for all but the smallest. 

2.2 The current strategy is to disperse equipment, decontamination facilities and the specialist drugs/instruments 
for use by paramedics throughout the UK to provide for an immediate local response that will be 
supplemented by mutual aid. It is therefore a key element of this strategy that aid from different parts of the 
country can arrive exactly where required and can directly communicate their arrival and receive their 
instructions from the Incident Commander (Silver) of their service. 

2.3 This will be possible only if each emergency service has an interoperable communications system. 

3 Communications between Control Rooms 

3.1 It is assumed that effective voice (and where appropriate, data) communications already exist between the 
control rooms of the primary emergency services in an area and between the control rooms of one of the 
services and the control rooms of that same service that surround it. 

3.2 These need to be enhanced to ensure that voice communications can be maintained irrespective of a failure of 
the Public Switched Telephone Network and any associated private circuit. 

3.3 They also need to be enhanced to ensure that control rooms of an emergency service can communicate by 
voice with any other control room of that service irrespective of its location in Great Britain, where necessary, 
independently of the public switched telephone network and any associated private circuit. 

4 Command and Control at Major Incidents 

4. 1 Voice communications between the Incident/Silver Commanders of the primary emergency services at a major 
incident is a long-established principle and represents the basic minimum requirement for interoperability. 

4.2 The main lessons from 1 1 September is to ensure that organizational boundaries or differing technical 
solutions to the provision of wide-area radio systems do not impair operational communications and build 
resilience into planning. 

4.3 The importance of multi-service interoperability at the incident/silver command level will increase in the event 
of failure of the systems providing wide-area communications to one or more of the primary emergency 

services. 
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5 The Agreed Requirement 

5.1 For the purposes of this agreement: 

Directly Means that communication can tal<e place using tlie wide-area radio 

system of tliat service, save wtiere a control room is involved in the 
communications, without the need to involve any control room. For multi- 
service interoperability it includes the radio systems of the services 
involved and any gateways necessary to provide that interoperability. 

This agreement does not require the primary emergency services to use 
a common wide-area radio system, but where they do not do so, any 
interfaces, gateways and links between systems that facilitate muiti- 
service interoperability must be resilient to failures of power supplies, 
equipment and connecting links between systems. 

Connexion for both types of interoperability need to be quick and effective 
(it should ideally be less than the total of the maximum specified 
connexion times of the wide-area radio systems involved, plus 10 %). 

Connexion and communication should be transparent to users and 
should support real-time duplex voice communication as a minimum. 

Mobile resource Means any operational vehicle equipped with a radio capable of 

accessing the wide-area radio scheme. 

Great Britain Means the landmass of England, Scotland and Wales (including 

inhabited islands). 

5.2 For same-service interoperability, the requirement is: 

[1] That the mobile resources of each primary emergency service, wherever located in Great Britain, shall be 
able to communicate directly with all other mobile resources of that emergency service and every control 
room of that service irrespective of organizational boundaries. 

[2] That every control room of that service shall be able to communicate directly by voice with any mobile 
resource of that service, wherever located in Great Britain and with every other control room of that 
service. 

5.3 For multi-service interoperability, the requirement is: 

[1] That the incident command (or silver) of each primary emergency service at an incident shall be able to 
communicate directly by voice with the incident command (or silver control) of the other emergency 
services attending the incident. 

[2] That every control room (or gold) of each primary emergency service dealing with an incident shall be 
able to communicate directly by voice the control room (or gold) of the other primary services dealing 
with that incident. 

[3] Any locally agreed transmission of data between the primary emergency services will take place between 
control rooms from where it will be cascaded through the command structures of each emergency 
service, as required. 

5.4 For resilience: 

[1] That the same-service and the multi-service interoperability between mobile resources shall continue to 
function even when any or all of the headquarters and control rooms of any of the emergency services 
are non-operational. 

[2] That the same-service and multi-service communications requirements shall continue to function 

irrespective of any failure of the public switched telephone network or any associated private circuit. 
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[3] In the event of the failure of the wide-area radio system used by one or more of the primary emergency 
services which prevents the planned multi-service interoperability and at incident/silver command level, 
incident commanders will determine locally how best to provide this level of interoperability. Where the 
primary emergency services have common equipment that will operate in a mode that does not involve 
access to a fixed radio system, this may be used for this purpose. Where this is not the case, this 
agreement provides that the police service at the incident will temporarily provide equipment to the 
incident/silver commands of the other emergency services for this purpose. 

5.5 It is neither intended nor desired that multi-service interoperability should apply to the handheld radio sets 
used to provide fire service at-incident communications. 

6 Protocols 

6. 1 Nothing in the above excludes, nor requires as an essential precondition, the control of interoperability by 
protocols. 

6.2 However, pan-service operating procedures will be essential to successful same and multi-service 
interoperability. In particular, safety and command requirements demand that at any incident communication 
between the fire service and the other emergency services are restricted to the Incident Commander 
(Silver -Fire). (It is expected that all fire appliances except the vehicle designated as "Silver Control" must 
switch off their radio sets on arrival at an incident. 

6.3 Nothing in the above in any way diminishes or interferes with the rights and responsibilities of each 
emergency service to control same-service interoperability by its own standard operating procedures. 

7 System Management 

7. 1 All communications systems need to be managed on behalf of the user service. 

7.2 Multi-service interoperability will require management representing the needs of all the services using it and 
dealing with procedural and technical issues. 

8 Data Requirements 

Save as provided, the transmission of data is outside the scope of this agreement. 
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